b075a5244f75c52b8072082cec64df5c593ceb7012a9f47ca477431a243ebe1b

General

Target
cef5ce2b0cfc.zip
Size 23.6MB
Sample260721-3d8apswajc
SHA256 b075a5244f75c52b8072082cec64df5c593ceb7012a9f47ca477431a243ebe1b
MD5 efa6e0f8ac57e137962429f1048331d0
SHA1 5665b85f7852fc888fd86b10fc808d8409e81430
SHA512 2e7d9a5767f6c721fb0a4456f95564b108b99895edef168f1364e0a98c6c27291ad1b61f769ff6e5bc7b578d735befd8a9a6b9360eaac32554f9a23e8870efe0
SSDEEP 393216:6zYCyM9COaHRlY7bLQuZM/+PWzdVTjZ3Az5iFr9MFUvUkv4aR8IsDAGr6ShL7i8q:60CfCHxlYEYnPMh8GJwUvv4aR8IssGR8
TLSH
T1D0473367D2D1F464E9342EA9169A7AF33702675CAF3922A1C05E1861EF8C1EDCDC36C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Violence/Violence.exe
- Size 6.7MB
- SHA256 da2517113a9e7c545d909b2b9f7b97916402a9f29aaeb2ff9a7aa3b8132b7299
- MD5 588ffd00006b6cdac1e985b305ad2b81
- SHA1 cea12d20fac5e988432f9cb5986c3ee5ac50d031
- SHA512 bd9b4fd0309422ff2785722cf9dc05fce60144b00b014a2f3d0dc7b0a83cb3a74442e3aa5f57d733dcec15476b279a031b87c19bf2f6761bf3eb07c1b062d6f7
- SSDEEP 49152:lQ5wKyD/UzzobuH1twKVR6Se6gawYOzYZqPpkcI:smkc
- TLSH
  T1A966F76B325491A9C16DC17AD0538B00F8F3747D2B3FC5E71AE10364AA99ED74E3E622
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Violence/win64/main_0.dll
- Size 659KB
- SHA256 d24d57586f186c63b7b0969e45c2e700dd6d7c8870325905d713c7744e187fe2
- MD5 350e4ac575f3e2fa6277de323b9bc064
- SHA1 ff3a5ab655c61745364a278f3a0debd952344176
- SHA512 aebb5ec82b7b3b859a54cfad6963c6fb8cd592bb8cbb9adadd1dd202153be1bc0746da26b0d8121ab68d28a1b9b510bf22cf4a87ec8fb58b190007fcc13e455a
- SSDEEP 12288:SFqgE0QW6/6igWK6qZqID+4xTuENRXizxLeC7CZMM+YDI4KQ6L9eLNKi848wg4V:eqrWc6igHzZJD+6tRXiUC7CuF4mL92K4
- TLSH
  T173E43318FB9698A59DCF70B68B8132C3E989A3161D2758C31D2F100EAD6C551DEDCB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral2
- Target
  Violence/win64/settings_26.dll
- Size 1012KB
- SHA256 3f2fbcdc75ab63b70200d0e357e432dd65266a0beef1f447322e4fb73475cd4c
- MD5 980778ba0d016887ed34e9a73fde8c67
- SHA1 ff2ed4c394f9264c42b5771b520517a350230597
- SHA512 8c1159bf044c27f09433ef8ee40e917c09b0a8041e620f69eb49a7df8b5160164fc71c72da6f8890c33c5dd6bc0d5dcdf8c79a2a445064edeef52a27ccbad472
- SSDEEP 24576:3wZnhYClQpZvmo6zHKlTzWsXjLvQBVMs8gwCtDpD:ehYCQvCHo3WszLIBVegwC3
- TLSH
  T1C72533B622062BAF7C3FFC7B35E619B7BF340810906DB552706098D132B79D86252B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3